$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft File: 8CFA88063D5C0A51C1D737A5170338865A245358.mft (raw, json) Hash identifier: dvw4gJHpv34eB3pSgI5uBUurVo1gHvMMTxbmgH08ViM= Subject key identifier: C1:A5:A9:CF:61:29:B5:82:DF:D1:8B:FA:82:67:F1:E7:8B:28:2E:5F Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358 Certificate serial: 050301BC7C0E082BC05AA7345E321F704F8FC675 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft Manifest number: 055B Signing time: Wed 18 Mar 2026 08:42:11 +0000 Manifest this update: Wed 18 Mar 2026 08:37:11 +0000 Manifest next update: Sat 21 Mar 2026 16:10:11 +0000 Files and hashes: 1: 8CFA88063D5C0A51C1D737A5170338865A245358.crl (hash: Y1MRvG/1G4UCigm9HWox1aQadFr8zRE/bQAUH+YFCf4=) 2: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: IwOy6L011wgRp4Z43jUYFVOd/TCfuz6IilpFz+BTytc=) 3: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: x7tsLph+/FB0QeKJjGm8RZPvo26S0bN0rsI7VAab3d8=) 4: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: iKqR4sdrDvQYzAbaXB9On/A/Jy5fdaFvtV4f3tabdnk=) 5: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: OX5qJy0ELn8OIpv9cwcHP0OwwrzKVk8H6b2UKzBtyEg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 16:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:03:01:bc:7c:0e:08:2b:c0:5a:a7:34:5e:32:1f:70:4f:8f:c6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Validity Not Before: Mar 18 08:37:11 2026 GMT Not After : Mar 21 16:10:11 2026 GMT Subject: CN=C1A5A9CF6129B582DFD18BFA8267F1E78B282E5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:ae:4c:75:3e:d8:87:78:66:ba:b8:55:78:e9: 39:18:72:a9:a2:b0:59:ec:4e:fc:d6:44:bd:9e:bd: 3d:7a:5b:f4:18:79:30:a6:25:bf:17:14:87:e9:12: f4:1b:dd:a4:ab:b6:1b:fd:bb:63:6e:d5:90:8b:0c: ce:e2:fd:b8:a1:49:32:3c:90:68:47:a2:ae:1a:69: e4:a2:b7:62:d6:09:79:b1:89:86:0b:34:68:21:d4: c7:a5:c1:9a:5e:51:d9:90:b4:2b:e2:5b:67:12:2e: 8f:8f:25:8c:1e:14:5f:12:c1:54:ea:cc:36:0d:40: bf:7a:fe:ab:61:24:12:4f:5a:6a:a6:9a:59:e7:c2: 97:fb:a9:77:67:ed:41:a3:6b:0c:3b:c9:5c:8a:48: 21:96:31:c0:e6:b2:c1:66:1e:4e:02:18:6f:97:1b: 8b:8f:e7:1b:80:43:f2:e6:42:9f:0f:26:56:c0:d0: 25:36:49:68:8b:50:63:00:94:1c:c1:9c:50:86:36: 50:35:0d:a9:77:51:4f:5a:18:b5:85:c3:42:f9:ba: 60:10:cb:94:c6:a7:68:71:fc:c7:8b:21:b2:48:f5: 10:7e:b7:60:38:80:15:ac:4f:45:f1:9d:4f:bc:0a: 64:42:77:3f:8b:22:83:27:d3:05:1c:81:19:00:c7: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A5:A9:CF:61:29:B5:82:DF:D1:8B:FA:82:67:F1:E7:8B:28:2E:5F X509v3 Authority Key Identifier: keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e7:4c:b4:45:bc:3f:32:29:3f:c8:fd:8d:8f:d6:6c:30:ab: ef:d0:62:d4:9c:4f:15:a6:09:77:4e:77:4f:5f:45:e0:59:1a: 88:39:bb:b1:41:19:62:e8:a4:8b:9b:af:04:88:e5:5d:8b:25: ff:69:e8:48:68:8e:91:64:4f:35:d1:fc:33:95:b6:4f:bd:d8: 30:c6:02:b8:cb:a7:85:8b:1f:62:f1:40:73:0f:e7:bc:c4:05: 64:55:b0:16:ed:79:60:7b:c9:1d:4f:88:d4:95:5c:c5:cf:be: ec:c6:e2:ba:29:59:d6:94:97:7b:2e:4e:68:24:03:96:05:88: 89:11:b5:a9:c9:58:b5:a3:be:b9:c1:d9:f8:33:8e:a1:27:72: 14:be:aa:77:fa:b8:99:01:9f:c3:92:f9:a8:cc:41:95:f0:13: 0f:70:b3:bc:36:8a:66:b9:d6:46:0e:ab:ba:80:a2:22:fc:3a: 47:e0:56:13:a5:0f:7a:64:fe:d9:2c:fd:26:95:bf:a5:81:15: 2c:75:9b:44:c0:55:10:9f:fc:de:a5:9b:93:14:95:d0:4d:a4: 24:73:48:57:75:ae:e1:7f:29:ed:a0:cb:75:21:66:f8:cc:ae: 59:a3:bd:57:4a:a0:9f:c4:bf:40:24:1a:7d:0b:ab:4f:88:95: 57:8d:fb:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQMBvHwOCCvAWqc0XjIfcE+PxnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1 QTI0NTM1ODAeFw0yNjAzMTgwODM3MTFaFw0yNjAzMjExNjEwMTFaMDMxMTAvBgNV BAMTKEMxQTVBOUNGNjEyOUI1ODJERkQxOEJGQTgyNjdGMUU3OEIyODJFNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9rkx1PtiHeGa6uFV46TkYcqmi sFnsTvzWRL2evT16W/QYeTCmJb8XFIfpEvQb3aSrthv9u2Nu1ZCLDM7i/bihSTI8 kGhHoq4aaeSit2LWCXmxiYYLNGgh1MelwZpeUdmQtCviW2cSLo+PJYweFF8SwVTq zDYNQL96/qthJBJPWmqmmlnnwpf7qXdn7UGjaww7yVyKSCGWMcDmssFmHk4CGG+X G4uP5xuAQ/LmQp8PJlbA0CU2SWiLUGMAlBzBnFCGNlA1Dal3UU9aGLWFw0L5umAQ y5TGp2hx/MeLIbJI9RB+t2A4gBWsT0XxnU+8CmRCdz+LIoMn0wUcgRkAx1KzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwaWpz2EptYLf0Yv6gmfx54soLl8wHwYDVR0j BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0 NTM1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4 ODY1QTI0NTM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATnTLRFvD8yKT/I/Y2P1mwwq+/QYtScTxWm CXdOd09fReBZGog5u7FBGWLopIubrwSI5V2LJf9p6EhojpFkTzXR/DOVtk+92DDG ArjLp4WLH2LxQHMP57zEBWRVsBbteWB7yR1PiNSVXMXPvuzG4ropWdaUl3suTmgk A5YFiIkRtanJWLWjvrnB2fgzjqEnchS+qnf6uJkBn8OS+ajMQZXwEw9ws7w2ima5 1kYOq7qAoiL8OkfgVhOlD3pk/tks/SaVv6WBFSx1m0TAVRCf/N6lm5MUldBNpCRz SFd1ruF/Ke2gy3UhZvjMrlmjvVdKoJ/Ev0AkGn0Lq0+IlVeN+y8= -----END CERTIFICATE-----Generated at Thu Mar 19 09:39:44 2026 by rpki-client